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I. Federal Anti-Terrorism Operations in the Wake of September 11, 2001 


The events of September 11th sparked a massive transformation in both the shape and scope 
of United States Federal Bureau of Investigation (FBI) surveillance and counter-terrorism 
operations. In the wake of September 11th, the FBI shifted from being an agency that 
investigated past or ongoing crimes to one focused on proactively gathering information to 
prevent future crimes. [1] The FBI not only developed a new framework for identifying likely 
future terrorists—the so-called ‘radicalization’ spectrum—but also created new investigative 
tools, expanding the strategies of surveillance and entrapment that it had honed during the 
Counter Intelligence Program (COINTELPRO) era. [2], [3] 


While many have highlighted the diagnostic flaws and political implications of the FBI’s use 
of the radicalization spectrum as an analytical tool, [4] few have attempted to draw a concise 
blueprint of the actual practices of entrapment and surveillance used in a typical terrorism 
sting following 2001 so that community members can learn to identify and combat them. [5] 
This article is an attempt to remedy this lacuna, and offers a step-by-step breakdown of the 
tactics regularly deployed by law enforcement during federal terrorism sting operations, 
surveillance, and informant recruitment. The piece also provides an overview of the statutes 
governing these operations, and the legal hurdles defendants face when presenting an 
entrapment defense. 


In today’s world, learning to recognize the patterns of entrapment, surveillance, and 
infiltration is all the more pressing. Although the contemporary intelligence infrastructure was 
originally designed to surveil the Arab- and Muslim-American communities, it has recently 
been adapted to a new, broader set of targets. [6] President Donald Trump’s May 2020 
announcement that the United States would declare “Antifa” (short for Anti-Fascist) a 
domestic terrorist organization is only the most recent example of the FBI’s widening aperture 
for domestic terrorism, and follows on the heels of prior revelations regarding the targeting of 
other communities and activist movements, including the Black Lives Matter and immigrants’ 
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surveillance, entrapment, and prosecution is likely to not only remain in use, but to be 
expanded upon. The abundance of FBI investigations (including “assessments,” discussed 
length in Part II) [10] against so-called “Black Identity Extremists” (BIE) since 2015 proves 
that the infrastructure built to repress Muslim Americans—particularly Black Muslim 
Americans—and Arab Americans is now being directly weaponized against other dissident 
communities and movements. [11] Already in 2020, the FBI and Joint Terrorism Task Forces 
(JTTFs) have approached multiple activists organizing for justice for George Floyd—who 
was killed by Minneapolis police officers—and have alternatively attempted to entrap them or 
pushed them to work as informants. [12] A straightforward explanation of how the FBI sets 
up and carries out these operations can inform community members and advocates, so that 
they are better prepared to recognize, avoid, and challenge these abusive practices. 


II. Counter-Terrorism Surveillance and the Information-Sharing Environment 


Adopted after 2001, the FBI’s new pre-emptive approach enabled the Bureau to implement 
looser regulations for surveillance of subjects or communities with potential nexuses to 
terrorism. While these specific shifts in policy and practice evolved over time, they were first 
compiled in the Attorney General’s Guidelines for Domestic FBI Operations. [13] Published 
in 2008, the Guidelines call upon the FBI to proactively seek out targets for surveillance “with 
an eye towards early intervention and prevention of acts of terrorism before they occur.” [14] 
The FBI published its own ‘Domestic Investigations and Operation Guide’ (DIOG) later that 
year, clarifying the means through which this new pre-emptive approach would be 
implemented. [15] The organizing analytic for intelligence gathering under the DIOG is the 
FBI’s “domain management” (or “battlefield management”) [16] approach to counter- 
terrorism surveillance. The 2008 DIOG explains that under this domain-based approach: 


The FBI is encouraged to “identify locations of concentrated ethnic communities in the Field 
Office’s domain, if these locations will reasonably aid the analysis of potential threats... If, 
for example, intelligence reporting reveals that members of certain terrorist organizations live 
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A. Surveillance Without a Factual Predicate 


The DIOG’s most materially significant provision is the framework for conducting 
assessments, a new form of preliminary surveillance that can be carried out without “a 
particular factual predication” or probable cause. [20] These assessments are usually the first 
step the FBI takes in mapping out and surveilling target communities, and can be initiated in 
pursuit of any of six “authorized purposes,” [21] including “obtaining information on 
individuals, groups, or organizations of possible investigative interest . . . and identifying and 
assessing individuals who may have value as confidential human sources.” [22], [23] The 
“confidential human sources” ground allows the FBI to investigate a given target or 
community for no reason other than identifying, recruiting, or maintaining “the cover or 
credibility of’ potential informants. [24] Where the assessment ostensibly relates to “threats 
to the national security,” it can be initiated by an individual agent “without supervisory 
approval” and can continue for an indefinite duration. [25] 


The investigative methods authorized during an assessment include “visiting any place or 
attending an event that is open to the public,” “physical, photographic and video surveillance 
where such surveillance does not infringe on a reasonable expectation of privacy,” 
questioning individual members of the public, “obtaining information from, tasking, or 
otherwise operating” confidential informants, and “requesting information without revealing 
FBI affiliation or the true purpose of a request.” [26] The DIOG was further revised in 2013, 
and now lists “trash covers” (physically picking through peoples’ garbage) as an authorized 
tool for use during an assessment. [27] In other words, a hypothetical FBI agent could 
initially insert themself into a group or community using a fake name or back-story, and then 
attend meetings, recruit informants, collect and look through the group’s trash, and take 
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communities. [30] The suspicious activity reports (SARs) program officially began in 20(~ 
[31] , when the United States Department of Homeland Security (DHS), the FBI, and stat 

and local law enforcement developed the collaborative Nationwide Suspicious Activity 
Reporting Initiative (NSI). [32] The following year, the FBI launched a national database 
called eGuardian, which allows the Bureau to receive SARs with a potential nexus to 
terrorism from the NSI, and to analyze and share them with other law enforcement and 
intelligence agencies at the state, local, and federal level, as well as fusion centers. [33] SARs 
that are submitted to the NSI but are not deemed to have a potential nexus to terrorism are 
distributed for follow-up investigation by other agencies. [34] 


Different government entities have integrated the NSI with existing fusion centers and law 
enforcement agencies, and have developed particular protocols for processing and forwarding 
the SARs they receive. [35] The FBI’s SARs program, for example, calls upon law 
enforcement officers and general members of the public to report any “observed behavior that 
may be indicative of intelligence gathering of pre-operational planning related to terrorism, 
criminal or other illicit intention.” [36] The 2015 “functional standard” for SARs includes as 
examples of “suspicious” behavior such common activities as “taking pictures or video of 
persons, facilities, buildings, or infrastructure in an unusual or surreptitious manner that 
would arouse suspicion . . . in a reasonable person,” “demonstrating unusual or prolonged 
interest in facilities, buildings, or infrastructure,” and “observation through binoculars, taking 
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Security Administration (NSA), and local police departments. Today, the primary channel 
through which agencies share intelligence information are the national network of “fusion 
centers” —electronic information hubs jointly-operated by federal, state, and local law 
enforcement. [42] Fusion centers are designed to facilitate information sharing between 
agencies on “homeland security-related issues,” and to establish “an analytical (fusion) 
process for evaluating threats.” [43] While initially launched as a counter-terrorism 
innovation, the vast majority of fusion centers have since broadened their scope to an “all 
crimes” orientation, where civilians and local officers are encouraged to report any 
information that may lead to the prevention of a crime. [44] As of June 2020, there are eighty 
of these fusion centers in operation nationwide. [45] 


The crowd-sourced information stored in these fusion centers is then accessible to any agency 
with access to that particular center, which usually includes DHS, the FBI, local law 
enforcement, and members of local JTTFs, among others. [46] By late 2017, 90% of all 
fusion centers had channels for receiving SARs directly from members of the general public, 
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contravention of FBI and Guidelines mandates so [the agents] will not have to complete the 
paperwork, obtain required approvals, or risk disclosing their informants’ identities to 
prosecutors or others,” according to the Office of the Inspector General. [55] 


This vast ecosystem of informants and hip pockets includes people who continued to commit 
crimes even while on the FBI payroll, as well as some with proven histories of lying to their 
handlers. [56] As Aaronson describes: 


Elie Assad, the informant in the Florida stings . . . lied during a polygraph examination in 
Chicago yet continued to work as an FBI informant. In the Michael Finton case, the FBI had 
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Individuals who are targeted for assessments or recruitment may also be added to the FBI’s 
Terrorist Screening Database (TSDB)—a larger database from which the FBI develops 
particularized watchlists and intelligence information for clients including the State 
Department, local law enforcement, foreign governments, and even private sector entities. 
[70] In Elhady v. Kable, District Court Judge Anthony Trenga held that the TSDB—which 
contained information on more than 1.2 million people, including “4,600 United States 
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will have the provocateur offer them money in exchange for participating in the conspiracy. 
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